Update your existing SAML 2.0 integration
Update your existing SAML 2.0 integration.
Before you begin
Role required: sso_config_admin, business_rule_admin, script_include_admin
About this task
Request the SAML 2.0 Update 1 plugin. Contact Customer Service and Support to request the SAML 2.0 Single Sign-On - Update 1: security enhancements plugin. The plugin applies updated versions of the SAML2SingleSignon installation exit (login script), SAML2Logout installation exit (logout script), and SAML2 script include (script object).
Merge customizations from existing installation exit scripts into new scripts. The update saves an inactive copy of the integration's original installation exit scripts. You can use these copies to merge any customizations that you made to the login and logout scripts to the new versions of these installation exits.
| Original Installation Exit Script Name | Original Script Status | New Installation Exit Script Name | New Script Status |
|---|---|---|---|
| SAML2SingleSignon | Inactive | SAML2SingleSignon_update1 | Active |
| SAML2 | Inactive | SAML2_update1 | Active |
| SAML2Logout | Inactive | SAML2Logout_update1 | Active |
You can navigate to the SAML 2.0 login and logout installation exit scripts using these paths:
- SAML 2 Single Sign-on > Login script.
- SAML 2 Single Sign-on > Logout script.
- System Definition > Installation Exits.
You can navigate to the SAML 2.0 update 1 script include using these paths:
- SAML 2 Single Sign-on > Script object.
- System Definition > Script Includes.
Test the Update.
Procedure
Add a system property called glide.authenticate.sso.saml2.debug with a value of true.
Attempt SAML 2.0 login.
Review the system log.
SAML2 validation errors begin with the text SAML2ValidationError.
Identify and fix typical login errors.
For more information, see Multi-SSO (SAML 2.0) errors and fixes.